changed list to hash, adding administrative permissions